well first off if you using win 2000 pro and this person has a id or user name there are lots or option you can do . just give the guy guest privileges on the workstations and or server and deni access to internet. just giving him guest privileges will make him unable to load or down load a program to the machine tada no msn messenger.